Fix File Associations following Malware cleanup

This scenario has been coming up fairly often recently. A PC becomes infected by a Fake-AV software. MalwareBytes (www.malwarebytes.org) cleans up the infection. Suddenly,EXE files cannot run. Not even Regedit.

 There are a couple off good resources which help fix up the registry and restore the EXE file association back to normal. Download and unzip the reg files. Right Click on the Reg file and select Merge.

Thanks and acknowledgements to Doug Knox and Ramesh Srinivasan. They have more file association fixes listed below.

PowerShell Not Your Father’s Command Line

There is a great 31 part blog post on PowerShell that is in developement (part 23 of 31 at this moment). Everything you wanted to know about PowerShell and some great scripts that can be used.

The main landing page for the blog is here –http://blogs.technet.com/b/matthewms/p/powershell.aspx

Here are the titles.

Part 1 of 31:Why PowerShell?
Part 2 of 31:The Basics on How to Read PowerShell
Part 3 of 31:Where Did All the Good Cmdlets Go?
Part 4 of 31:Who Ya Gonna Call For Help?
Part 5 of 31:What’s in it for Devs?
Part 6 of 31:A Cmdlet By Any Other Name Would Be An Alias
Part 7 of 31:Conjunction Function PowerShell What Are Functions?
Part 8 of 31:Won’t You Take Me To Functiontown?
Part 9 of 31:Another Side of PowerShell Profiles
Part 10 of 31:PowerShell Protecting You From Yourself
Part 11 of 31:PowerShell Providers and You!
Part 12 of 31:PowerShell and The Registry
Part 13 of 31:The Provider Active Directory Style
Part 14 of 31:Sorry I’m Not Home Right Now,Walking into IIS Webs…
Part 15 of 31:ISE,ISE Baby…
Part 16 of 31:PowerShell Take Me Out To The Grid
Part 17 of 31:Who Wants to Manage Active Directory?
Part 18 of 31:So You Deleted A User…On Purpose
Part 19 of 31:Small Business Server,PowerShell,and Me
Part 20 of 31:Hanging with Hyper-V
Part 21 of 31:Knock Knock PowerShell Calling!
Part 22 of 31:Good PowerShell Things Come in Nifty Packages
Part 23 of 31:HUGE Announcements,Disagreements,Best Practices and A Party…Oh My!
Part 24 of 31:PowerShell Did What!?!? How to Mitigate Risk!
Part 25 of 31:Did You Know PowerShell Can Talk VMware?
Part 26 of 31:Start Spreading the News…
Part 27 of 31:It Takes a Community to Raise a Language
Part 28 of 31:What is the .NET Framework?
Part 29 of 31:Demystifying MSDN and PowerShell static syntax
Part 30 of 31:PowerShell Likes the Pretty Blue Eyes of Azure Too
Part 31 of 31:That’s a Wrap and We are Not Done Yet!

Creating a multiboot USB drive from ISOs

A good friend Robert Pearman (SBS MVP) from the UK recently published this useful resource –http://titlerequired.com/2011/05/01/usb-multiboot-toolkit/

In a nutshell,the utility will allow you to create a bootable USB with a number of ISOs on the stick. Excellent for having a portable AntiMalware/AntiVirus utility or for running various other tools.

Free Security Products

A very informative article (http://www.crn.com.au/Feature/238896,the-price-for-these-security-products-is-right.aspx/0) appeared recently in the Computer Reseller News recently. It showcased a bunch of free antivirus utilities and services. I have put the list of free products,which are essential in the battle against viruses and malware.

Installed Programs

Online Services

Remember that your security tools are only good if you practice safe IT use. Be aware of your browsing links and sites. Never blindly click on links in emails or websites.

Microsoft Showcase:SBS2011 Standard Learning Bites

Microsoft have release a bunch of video how-tos on various aspects on SBS2011.

This is actually a fairly handy resource for training. There are a lot more videos and helps here –http://www.microsoft.com/showcase/en/us/default.aspx

Extend Home Server “Vail”beta installation

The public beta for Windows Home Server codenamed “Vail”expires today. As a result,current installations will reboot hourly because the server would have moved into expiry mode.

Microsoft have provided a workaround to extend the expiry in the interim,until the next beta is released. This workaround is based around Windows 2008 R2 SP1 Release Candidate.

To extend the expiry,you can do the following:

  1. Install WS08 R2 SP1 RC on the server from http://www.microsoft.com/downloads/en/details.aspx?familyId=c3202ce6-4056-4059-8a1b-3a9b77cdfdda&hash=2SduI20oa3rGcMvoU%2bPV1TVHUik%2f3CNeLRmMuOcJXzz13kgszkD2VWTIpb%2bAS0in9K12Sc14FpC3sdT4PNXCUw%3d%3d
  2. Logon on https://connect.microsoft.com/WindowsHomeServer with your connect credentials
  3. Click on Product keys (in the left hand side column)
  4. Click on Request a new product key
  5. Click on Get Key
  6. In Windows Home Server,open a command prompt
  7. Type “slmgr.vbs -ipk ABCDE-FGHIJ-KLMNO-PQRST-UVWXY” (where ABCDE.. is your new key as requested above)
  8. Type “slmgr.vbs –ato
  9. Reboot the server,and your beta timeframe has been extended.  You can check this by opening up a command prompt and typing winver

 You can view the Microsoft information on this topic here –http://social.microsoft.com/Forums/en/whsvailbeta/thread/9d459f48-2e9e-4279-ade1-6d4d5e907e4c

The Windows Home Server Blog page is here –http://windowsteamblog.com/windows/b/windowshomeserver/

Announcing SBS2011

SBS2011 has been released to manufacturing and is available for download on MSDN,Technet,and can be ordered from VLSC.

Here are some links to the various resources that are popping up fast and furious.

 Product Information

Training Resources

Online Help and Resources

Migration Resources

Knowledge Base Articles

PowerShell –Check Permissions on files and folders

While looking up some PowerShell scripts,I came across a neat command to recursively look through a folder and report on security and permissions for objects in the folder and subfolders.

Get-ChildItem C:\Scripts -recurse | ForEach-Object{Get-Acl $_.FullName} | Export-CSV C:\filename.csv

In Windows Server 2003,PowerShell is not automatically installed. You can also use a simple command –CACLS –to perform the same function.

cacls [TopFolder] /t >C:\filename.txt

This will dump the security information for TopFolder and all subfolders into the filename.txt file.

Some great resources for PowerShell scripting can be found from these links.

Exchange Store Size checks

Here are a couple of scripts to check the size of the Exchange Stores. With the 75GB limit in Exchange 2003 and possible personal store located in various areas for Exchange 2007 and beyond,it is useful to have a quick overall glance at the Exchange information all at a go.

For Exchange 2003 and below,you can use Michael B Smith’s (Exchange MVP) scripts found here –http://theessentialexchange.com/blogs/michael/archive/2007/11/13/finding-disk-space-used-by-exchange.aspx. For a self installing version of this script,you can download it here –http://www.petri.co.il/reporting_storage_size_in_exchange.htm

In Exchange 2007,the STM file was elimited according to Michael,and so the script terminates with an AD error. He has supplied a really quick and dirty Exchange PowerShell script to output the sizes of the stores. Cut and past the following code into notepad and save the file with a .PS1 extension and run this from the Exchange Management Shell.

$totalArray = @()$totalArray += get-mailboxdatabase -ea 0 |%{dir -ea 0 $_.EdbFilePath | select Name,Length }$totalArray += get-publicfolderdatabase -ea 0 |%{dir -ea 0 $_.EdbFilePath | select Name,Length }$totalArray | out-string -width 70[int64]$totalSize = 0$totalArray |%{$totalSize += $_.Length }"Total size of databases{0} bytes,{1} GB" -f  $totalSize.ToString("N0"),($totalsize / 1GB).ToString("N3")

There are many other scripts out there,which can produce nicely formatted output and possibly more information if required. But I found that this gave me the information I needed quickly.

UPDATE 8/1/2011:Michael has updated his script to work with Exchange 2007 and 2010. You can access the script here –http://theessentialexchange.com/blogs/michael/archive/2011/01/07/finding-disk-space-used-by-exchange-v2.aspx

Michael’s blog contains a depth of great articles and scripts on everything about Exchange - www.TheEssentialExchange.com

DNS checking tool

Here’s a great tool for checking DNS server records.

Squishywishywoo –http://www.squish.net/dnscheck/